For HIPAA integrations you're going to need to a lot of security auditing. Something that might work well is publishing a white paper of your personal security

For HIPAA integrations you're going to need to a lot of security auditing. Something that might work well is publishing a white paper of your personal security practices. Things like full-disk-encryption for developers, password policies, hardware 2FA for ALL company accounts, SSO for all logins with a single place to delete a credential set, mandatory monthly/weekly HIPAA training, etc. Another thing you might want to consider doing is open sourcing some stuff to help setup FHIR/HL7 integrations. Pretty much the only fully fledged HL7 "solution" you can get for free HAPI [0]. You might want to make some open source tools around all of this. For example: a reverse proxy that prints all to a log that's censored for PII for debugging. Make that for free, push that to github and open source it. This will get you: 1. Lead generation: People in this space will know who you are 2. Trust: Hiring consultants is difficult if you cant see the quality of their work. If you do a good job on these OSS tools you can prove to people that your code quality is high. This demands a much higher price tag. Something else you might consider discussing is what EMRs you have direct experience with. For instance Epic [1] provides "training services". HL7 has a "HL7 Certified" exam you can take to prove you can memorize it's obtuse message structures. Taking, passing, and displaying this might make some buisnessy-people happy. [0] - https://hapifhir.github.io/hapi-hl7v2/ https://hapifhir.github.io/hapi-hl7v2/ [1] - https://www.epic.com/services https://www.epic.com/services